Cisco Expressway SIP Media Encryption Modes

Default SIP Media Encryption Mode for Newly Created Zones in Cisco Expressway

Question

Which SIP media encryption mode is applied by default for newly created zones in the Cisco Expressway?

Answers

Explanations

Click on the arrows to vote for the correct answer

A. B. C. D.

A.

https://www.cisco.com/c/dam/en/us/td/docs/voice_ip_comm/expressway/admin_guide/Cisco-Expressway-Administrator-Guide-X8-10.pdf

Sure, I'd be happy to provide you with a detailed explanation of the answer to this question.

The Cisco Expressway is a solution that enables secure collaboration with anyone, anywhere, on any device. It provides secure access for remote workers and mobile users, as well as interworking between different collaboration solutions.

SIP media encryption is a method of securing audio and video streams in a communication session between two endpoints. Cisco Expressway supports multiple modes of SIP media encryption to ensure secure communication between endpoints.

When a new zone is created in Cisco Expressway, the default SIP media encryption mode that is applied to the zone is Auto. This means that the Expressway will negotiate the encryption mode with the endpoint, based on the capabilities of both endpoints. If both endpoints support encryption, the communication will be encrypted. If one endpoint does not support encryption, the communication will be unencrypted.

The other available SIP media encryption modes in Cisco Expressway are Off, Best Effort, and Force Encrypted.

  • Off: This mode disables SIP media encryption entirely. All communication between endpoints will be unencrypted.

  • Best Effort: This mode attempts to negotiate SIP media encryption with the endpoint. If the endpoint does not support encryption, the communication will still proceed without encryption.

  • Force Encrypted: This mode requires SIP media encryption for all communication between endpoints. If an endpoint does not support encryption, the communication will not proceed.

In summary, the default SIP media encryption mode applied by Cisco Expressway for newly created zones is Auto, which negotiates the encryption mode with the endpoint based on capabilities.